Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 8 Dec 2025 14:19:15 -0800
From:      Doug Hardie <bc979@lafn.org>
To:        Jim Pazarena <fquest@paz.bz>
Cc:        questions@freebsd.org
Subject:   Re: SPF logic
Message-ID:  <F0404B69-5C13-4E9C-99F2-D69B7571074A@sermon-archive.info>
In-Reply-To: <a2b6b2cb-c804-4d86-a0ea-05066257aa5b@paz.bz>
References:  <a2b6b2cb-c804-4d86-a0ea-05066257aa5b@paz.bz>

next in thread | previous in thread | raw e-mail | index | archive | help

> On Dec 8, 2025, at 13:59, Jim Pazarena <fquest@paz.bz> wrote:
> 
> I set up SPF for my domains, which has been in place for quite a while.
> 
> I recently set up incoming SSL/TLS + authentication for customers' emails.
> 
> I am finding now that remotely connected customers (such as those away on holidays) are being denied by the SPF rules because they are no longer on a local subnet, and now filtering in to the SPF rules.
> 
> I am wondering what logic I need to put in place to let them bypass the SPF if they come in by local SSL authentication ? I can't quite reason it out. Thanks for any suggestions/advice.


The solution to this will be dependent on the MTA you are using.  You should probably ask on the maillist for that MTA.

-- Doug




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?F0404B69-5C13-4E9C-99F2-D69B7571074A>